v3.11.6

TL;DR: Promoted @rc → @latest (maintainer "го"). A 21-RC line on stable 3.11.4/3.11.5 that shipped activation + retrieval quality + a heavily-audited security/correctness hardening cascade, with the v3.6.1 ≥2-external-auditor gate satisfied (rc.14 Codex #1 + rc.19/rc.20 Codex #2, both ship_to_@latest:false at their pins — every finding closed across rc.15/rc.20/rc.21). Feature line: configure (rc.4 — prints a ready-to-paste per-client MCP config, closes the "installed but not wired up" gap), an eval-system overhaul (rc.5 — Hit@1/Hit@k/AllRel@k + by_category + eval:compare A/B delta), alias indexing + FTS5 column weights (rc.6 — title 10× / alias 5× / content 1×; persistence-format SCHEMA_VERSION 4→5, existing --persistent-index auto-rebuilds once on upgrade), multi-query fan-out (rc.7 — RRF-merged queries[]), a feedback realpath-keying fix (rc.8), a LongMemEval-S peer adapter (rc.10), per-hit explain (rc.11), and canonical parser structure accessors (rc.2). Hardening: rc.17 the pages tuple-schema connector bug that broke ChatGPT/Gemini/Grok entirely (#354/#360, z.tuple→z.array().length(2) + a behavioral MCP-schema-compat invariant), rc.15 the cold fan-out TF-IDF DoS single-flight + strict-bench, rc.20 the H-2 stateful DELETE /mcp data-integrity race (external #2 — partial multi-file write; drain in-flight before transport teardown), rc.21 the mandatory re-sweep that caught H-2's F1 SSE-drain (DELETE stalled ~5s on an open notification stream → inFlightCalls counter split) + L-1's F2 symlink recursion (a shared realpath entrypoint guard for all 7 scripts). Plus multiple dependabot waves cleared with an empty audit allowlist (gray-matter→js-yaml removed the last advisory root; pdfjs 5→6; protobufjs/hono/fast-uri/sharp overrides). The mandatory pre-promotion re-sweep ran CLEAN: the FTS5 v5 auto-rebuild is verified for the 3.11.5→3.11.6 upgrade path (transaction + rollback + rc.33 fail-soft backstop), the F1 transport counter-split is consistent across all 4 runWithRefcount sites, and currency was swept (CITATION→3.11.6, the README configure note, the CLAUDE North-Star header). 46 tools · 19 prompts · 1594 source tests · 11 languages. CI publishes @latest + SLSA L2 provenance + OIDC MCP-registry sync (stable-only); no API breaks (additive minor).

Method note: the fresh-on-promoted-commit external pass is waived as for the v3.9.0 / v3.10.0 promotions — the ≥2-auditor gate is met by the rc.14 + rc.19/rc.20 Codex passes plus the internal multi-lens/re-sweep cascade (rc.15/rc.16 re-sweeps, the rc.20 re-sweep that produced rc.21, and this pre-promotion re-sweep). Tracked-but-non-blocking follow-ups: the A7 reference-hardware reranker reproduction, the A8 generalized client-conformance gate, and the durable H-2 fix (abort-signal + rollback-safe batch writes) for the residual case of a mutation running longer than DELETE_DRAIN_MS.